I think that /dev/u?random being implemented by Fortuna is actually incorrect, and the macOS manpages are wrong. My understanding is that it is using a NIST DRB

I think that /dev/u?random being implemented by Fortuna is actually incorrect, and the macOS manpages are wrong. My understanding is that it is using a NIST DRBG, there's a Craig Federighi tweet somewhere confirming this. See: https://crypto.stackexchange.com/a/72221 https://crypto.stackexchange.com/a/72221